openSUSE Security Update : jasper (openSUSE-2016-1309)

This script is Copyright (C) 2016-2017 Tenable Network Security, Inc.


Synopsis :

The remote openSUSE host is missing a security update.

Description :

This update for jasper to version 1.900.14 fixes several issues.

These security issues were fixed :

- CVE-2016-8887: NULL pointer dereference in
jp2_colr_destroy (jp2_cod.c) (bsc#1006836)

- CVE-2016-8886: memory allocation failure in jas_malloc
(jas_malloc.c) (bsc#1006599)

- CVE-2016-8884,CVE-2016-8885: two NULL pointer
dereferences in bmp_getdata (incomplete fix for
CVE-2016-8690) (bsc#1007009)

- CVE-2016-8883: assert in jpc_dec_tiledecode()
(bsc#1006598)

- CVE-2016-8882: segfault / NULL pointer access in
jpc_pi_destroy (bsc#1006597)

- CVE-2016-8881: Heap overflow in jpc_getuint16()
(bsc#1006593)

- CVE-2016-8880: Heap overflow in jpc_dec_cp_setfromcox()
(bsc#1006591)

- CVE-2016-8693 Double free vulnerability in mem_close
(bsc#1005242)

- CVE-2016-8691, CVE-2016-8692: Divide by zero in
jpc_dec_process_siz (bsc#1005090)

- CVE-2016-8690: NULL pointer dereference in bmp_getdata
triggered by crafted BMP image (bsc#1005084)

- CVE-2016-2116: Memory leak in the
jas_iccprof_createfrombuf function in JasPer allowed
remote attackers to cause a denial of service (memory
consumption) via a crafted ICC color profile in a JPEG
2000 image file (bsc#968373)

- CVE-2016-2089: invalid read in the JasPer's
jas_matrix_clip() function (bsc#963983)

- CVE-2016-1867: Out-of-bounds Read in the JasPer's
jpc_pi_nextcprl() function (bsc#961886)

- CVE-2015-5221: Use-after-free (and double-free) in
Jasper JPEG-200 (bsc#942553).

- CVE-2015-5203: Double free corruption in JasPer
JPEG-2000 implementation (bsc#941919)

- CVE-2008-3522: Buffer overflow in the jas_stream_printf
function in libjasper/base/jas_stream.c in JasPer might
have allowed context-dependent attackers to have an
unknown impact via vectors related to the mif_hdr_put
function and use of vsprintf (bsc#392410)

- jasper: NULL pointer dereference in jp2_colr_destroy
(jp2_cod.c) (incomplete fix for CVE-2016-8887)
(bsc#1006839)

For additional change description please have a look at the changelog.

This update was imported from the SUSE:SLE-12:Update update project.

See also :

https://bugzilla.opensuse.org/show_bug.cgi?id=1005084
https://bugzilla.opensuse.org/show_bug.cgi?id=1005090
https://bugzilla.opensuse.org/show_bug.cgi?id=1005242
https://bugzilla.opensuse.org/show_bug.cgi?id=1006591
https://bugzilla.opensuse.org/show_bug.cgi?id=1006593
https://bugzilla.opensuse.org/show_bug.cgi?id=1006597
https://bugzilla.opensuse.org/show_bug.cgi?id=1006598
https://bugzilla.opensuse.org/show_bug.cgi?id=1006599
https://bugzilla.opensuse.org/show_bug.cgi?id=1006836
https://bugzilla.opensuse.org/show_bug.cgi?id=1006839
https://bugzilla.opensuse.org/show_bug.cgi?id=1007009
https://bugzilla.opensuse.org/show_bug.cgi?id=392410
https://bugzilla.opensuse.org/show_bug.cgi?id=941919
https://bugzilla.opensuse.org/show_bug.cgi?id=942553
https://bugzilla.opensuse.org/show_bug.cgi?id=961886
https://bugzilla.opensuse.org/show_bug.cgi?id=963983
https://bugzilla.opensuse.org/show_bug.cgi?id=968373

Solution :

Update the affected jasper packages.

Risk factor :

Critical / CVSS Base Score : 10.0
(CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now